Zero-rating abuse detection from CDR and the free URL list
Traffic marked free on the bill should match the operator free apps and sites. When it does not, revenue leaks.
CYBERDETECT reads charging / CDR usage events you already produce: rating, bytes, destination host or SNI, and the free URL or app list on the event.
When usage is zero-rated but the destination is not on the free list — or free volume looks wrong — the team gets an alert in Slack, Teams, or your SOAR.
It sits in the Telco / SIM pack next to SIM swap and radio abuse. It does not connect to the carrier core. It can go live the same day from the logs.
Related
- SIM swap detection for mobile operators
- Payment fraud detection
- OTP relay detection
- Account takeover detection
- Credential stuffing detection
- Impossible travel detection
- New device detection
- Email phishing detection
- Smishing detection
- eSIM clone detection
- IMSI catcher detection
- ATM fraud detection
- Behavioral anomaly detection